calling a function from within html entity decode

[virtism]

Hi ,

My site has a backend , the backend stores data through a WYSISYG editor . This editor is using htmlentities function to store any changes in the database through backend .

To display the data stored my site uses htmlentitydecode() function by fetching an object from database .

I want to include a php function in the site , however when i enter php function through backend , it simply echoes all php code . e.g. <?php echo "hello"; ?>

page displaying code is php itself.

Any way to get around this problem ?

Thanks

[eelixduppy]

Nope, not unless you stop converting all the text to html entities, which is something you are going to want to keep. Trust me, you don't want PHP code to be entered directly through a backend like that onto your server for execution. One security hole and you're in trouble.